[c-nsp] tcpdump on ios?

Gert Doering gert at greenie.muc.de
Sat Jan 12 08:04:39 EST 2008


Hi,

On Sat, Jan 12, 2008 at 03:21:09AM +0200, Kim Onnel wrote:
> if we are talking about hardware switching platforms then i believe it makes
> sense that it will only sniff process switched traffic, so why is it useless
> then?

If you have process switched traffic, something is wrong with your 
network setup.  Some features just plain do not work without CEF (like
"MPLS"), others are horribly slow or cause insane amount of CPU load.

> IMHO, it is very difficult to design a router that will capture traffic
> being hardware switched, am i correct?

SPAN/RSPAN/ERSPAN exit and work very well :-)

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 304 bytes
Desc: not available
Url : https://puck.nether.net/pipermail/cisco-nsp/attachments/20080112/9cd02235/attachment.bin 


More information about the cisco-nsp mailing list